Last Thursday, OSM noticed malicious behavior and froze the account of a user that was vandalizing their data with subtle edits. After freezing the account, OSM contacted the individual to determine if the user was human and verify that they understood the open-source nature and rules of OSM. On Monday, the user verified they understood the rules and that they were human so OSM reinstated the account. Once access was restored, the user almost immediately began to further vandalize OSM’s map data.

When the system administrator investigated the rogue user’s account, they noticed that the user’s IP address was in the same range that Mocality had previously identified. Although OSM said that the detected vandalism began last week, there have been over 102 thousand hits belonging to 17 accounts from the Google IP range over the past year.

Google said the following concerning the situation and the rogue contractors:

“The two people who made these changes were contractors acting on their own behalf while on the Google network. They are no longer working on Google projects.”